Lucene search

OracleCVE-2017-3632

HistoryAug 08, 2017 - 3:29 p.m.

CVE-2017-3632

2017-08-0815:29:07

oracle

web.nvd.nist.gov

cve-2017-3632

solaris

oracle

sun systems products

cde calendar

easystreet

cvss 3.0

network access

tcp

takeover

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3632 is assigned to the “EASYSTREET” vulnerability. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected configurations

Nvd

Node

oraclesolarisMatch10

oraclesolarisMatch11

VendorProductVersionCPE
oraclesolaris10cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
oraclesolaris11cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	solaris	10	cpe:2.3:o:oracle:solaris:10:::::::*
oracle	solaris	11	cpe:2.3:o:oracle:solaris:11:::::::*

CNA Affected

[
  {
    "product": "Solaris Operating System",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10"
      },
      {
        "status": "affected",
        "version": "11"
      }
    ]
  }
]

References

www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

www.securityfocus.com/bid/99857

www.securitytracker.com/id/1038938

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

Related for CVE-2017-3632